Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
File: ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft (raw, json)
Hash identifier: BlvTJ3S2DGyd7/0sySRtI9CS+nUZCTOj6+1CA8KPuO0=
Subject key identifier: 49:1F:CD:C7:12:D5:14:EE:8E:96:98:FB:74:28:2E:04:79:82:13:23
Authority key identifier: 9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3
Certificate issuer: /CN=9e07e7c372a9db09332c479c7291b8629721afe3
Certificate serial: 0199FDDA13EA3E3A48977AB2F9533313BA47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
Manifest number: 01C9
Signing time: Sun 19 Oct 2025 19:02:31 +0000
Manifest this update: Sun 19 Oct 2025 19:02:31 +0000
Manifest next update: Mon 20 Oct 2025 19:02:31 +0000
Files and hashes: 1: ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl (hash: gIuReMZ2cAtJqSED9otkygzP7U2WD/j6JqSdLbrdcvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:13:ea:3e:3a:48:97:7a:b2:f9:53:33:13:ba:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e07e7c372a9db09332c479c7291b8629721afe3
Validity
Not Before: Oct 19 19:02:31 2025 GMT
Not After : Oct 20 19:02:31 2025 GMT
Subject: CN=491fcdc712d514ee8e9698fb74282e0479821323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:76:96:1a:cc:4a:db:b8:d3:0f:cc:86:74:e5:
d9:4e:81:26:98:ac:da:33:62:cc:5f:d6:ca:20:52:
ac:6a:10:cc:1f:74:03:31:e3:17:52:35:0d:a4:26:
88:f4:21:4a:f8:8f:f7:30:0a:1c:03:bd:d1:a7:37:
12:7c:5a:d2:32:c4:e3:04:5a:04:c5:51:40:b0:b8:
d7:49:a0:54:01:8b:13:b0:49:33:68:fc:d4:99:93:
9a:e7:b4:fd:a5:ba:5e:bc:cf:d7:ef:15:78:ea:16:
37:aa:a5:e0:3f:fd:f2:c1:c3:a5:a7:4f:85:cf:87:
63:b6:21:bb:74:41:c5:33:03:7f:e4:86:87:79:16:
69:1d:64:9f:88:f6:cb:07:a4:35:75:01:60:57:a0:
70:67:cf:2e:9c:fd:66:ea:2b:06:e7:47:ff:ff:14:
21:73:cc:f7:ed:a0:19:e0:c8:ba:69:0b:19:95:40:
63:30:e9:7c:c4:5c:3a:49:0f:99:59:ce:1e:b9:a3:
e9:6a:83:42:59:01:aa:10:25:48:cf:31:ab:42:2f:
36:ea:15:39:85:c2:c0:60:aa:1e:2a:8d:64:a3:eb:
98:61:fe:aa:ca:4d:75:e7:ab:f0:34:c5:45:8e:8b:
c6:ed:c8:02:00:8a:28:4c:1b:c7:45:6b:ba:f0:af:
4e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1F:CD:C7:12:D5:14:EE:8E:96:98:FB:74:28:2E:04:79:82:13:23
X509v3 Authority Key Identifier:
keyid:9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:77:21:ca:78:a3:4b:33:6e:35:e0:d6:4c:46:b9:1c:1f:1e:
3a:95:71:7a:dc:20:df:84:d9:ee:4c:cb:44:b9:a0:1c:9c:8a:
5b:0c:fd:fc:8b:61:e2:b7:d3:e8:3b:31:1b:3e:0b:c2:fb:7b:
8e:2e:4b:32:a3:68:dc:8c:cb:9d:39:3c:b1:33:6e:32:51:62:
74:31:db:22:6b:3d:6f:51:6d:54:29:e7:6f:5c:39:be:2b:1d:
95:30:e0:66:25:dc:0b:ff:7f:f8:6b:5e:90:2c:75:d7:e6:f4:
e3:9a:eb:e5:e4:2e:a0:1d:f8:08:25:a6:34:2f:98:dc:ff:27:
32:27:ad:9a:b9:0b:85:03:3f:4e:5d:bd:28:b0:22:01:28:89:
66:c7:f6:42:d6:dc:d3:9c:ea:ab:d8:2e:13:76:be:00:65:28:
f4:5d:07:92:6e:f2:84:7d:3e:cf:b7:c7:5f:85:cc:7c:29:3a:
d6:c6:25:60:2e:0d:7d:ab:f5:ea:62:b0:58:2d:cf:cc:20:ee:
6d:3f:5a:72:45:42:85:59:74:ce:10:bc:6e:c2:05:1a:b4:5f:
d1:95:f8:57:e0:97:eb:19:19:fa:b0:57:22:1c:8f:97:bc:be:
da:df:89:6f:95:c2:02:f9:ab:e7:12:a8:e6:f1:72:b1:3b:36:
b7:6f:4f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:38:30 2025 by rpki-client